CVE-2014-0897 The Configuration Patterns component in IBM Flex System Manager (FSM) 1.2.0.x, 1.2.1.x, 1.3.0.x, and 1.3.1.x uses a weak algorithm in an encryption step during Chassis Management Module (CMM) account....
LowCVSS 3.5
EPSS 0.59%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Configuration Patterns component in IBM Flex System Manager (FSM) 1.2.0.x, 1.2.1.x, 1.3.0.x, and 1.3.1.x uses a weak algorithm in an encryption step during Chassis Management Module (CMM) account creation, which makes it easier for remote authenticated users to defeat cryptographic protection mechanisms via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm flex system manager | = 1.2.0 | No fix listed |
| ibm flex system manager | = 1.2.1 | No fix listed |
| ibm flex system manager | = 1.3.0 | No fix listed |
| ibm flex system manager | = 1.3.1 | No fix listed |
References
- IT03824 vendor-advisory
- www.ibm.com vendor-advisory
- ibm-flex-cve20140897-weak-encryption(91395) vdb-entry